Privacy Policy

VFT HOLDINGS (PVT) LTD (“we”, “us”, “our”) publishes the BioSync Pro mobile application (the “App”) for employee self-service connected to an organisation’s BioSync Pro server.

This Privacy Policy explains what information the App collects, how it is used, who receives it, and what choices you have. By installing or using the App, you agree to this policy.

For HR records stored on your employer’s BioSync Pro server, your employer is usually the data controller. We provide the App and related services (such as push notification delivery) as a service provider.

BioSync Pro Mobile is for employees authorised by their employer. The App is not directed at children under 16.

Information you provide

Information collected automatically

Information from your employer’s server

After login, the App displays data from your employer’s BioSync Pro system, which may include your name, employee number, department, attendance, leave, payslips, loans, and company announcements.

• Authenticate you and maintain your session
• Submit attendance and HR requests to your employer’s server
• Display your employment self-service data
• Deliver push notifications you allow
• Maintain App security and reliability
• Comply with applicable law

We do not sell your personal data and do not use it for third-party advertising.

• Your employer’s BioSync Pro server — primary storage and processing of employment data (HTTP/HTTPS depending on your IT configuration).
• Google Firebase — push notification delivery. See Google’s Privacy Policy.
• Your device — server URL, token, and preferences stored locally until sign-out or uninstall.

Device data is cleared when you sign out or uninstall the App. Data on your employer’s server is retained according to your employer’s policies and applicable law. Push tokens are deactivated on sign-out.

We use reasonable technical and organisational measures including token-based authentication and encrypted transport where HTTPS is enabled. Your employer is responsible for securing their BioSync Pro server.

Depending on applicable law, you may have rights to access, correct, delete, or restrict processing of your personal data, and to withdraw consent for location or notifications.

For workplace records on your employer’s server, contact your employer’s HR department. For App-related questions, contact us using the details in Section 2.

If servers or providers are located outside your country, data may be transferred internationally under appropriate safeguards arranged by your employer and service providers.

We may update this policy from time to time. The “Effective date” at the top will change when we do. Continued use of the App after updates constitutes acceptance where permitted by law.